Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

SUSE 12-SP5: 2020:3880-1 Moderate Xen Security Updates Available

suse
Calendar Grey December 18, 2020
Scroller Suse
SUSE has released a security update addressing 9 vulnerabilities in xen categorized as moderate risk. Users of SUSE Linux systems are advised to apply this update promptly.
An update that solves 9 vulnerabilities and has two fixes is now available

Summary

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests (bsc#117949 XSA-115). - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions (bsc#1179498 XSA-322). - CVE-2020-29483: Fixed an issue where guests could disturb domain cleanup (bsc#1179502 XSA-325). - CVE-2020-29484: Fixed an issue where guests could crash xenstored via watchs (bsc#1179501 XSA-324). - CVE-2020-29566: Fixed an undue recursion in x86 HVM context switch code (bsc#1179506 XSA-348). - CVE-2020-29570: Fixed an issue where FIFO event channels control block related ordering (bsc#1179514 XSA-358). - CVE-2020-29571: Fixed an issue where FIFO event channels control

Topics%20covered

Topics Covered

security advisory moderate severity system patch SUSE xen

References

#1027519 #1163019 #1176782 #1179477 #1179496

#1179498 #1179501 #1179502 #1179506 #1179514

#1179516

Cross- CVE-2020-29130 CVE-2020-29480 CVE-2020-29481

CVE-2020-29483 CVE-2020-29484 CVE-2020-29566

CVE-2020-29570 CVE-2020-29571 CVE-2020-8608

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE Linux Enterprise Server 12-SP5

https://www.suse.com/security/cve/CVE-2020-29130.html

https://www.suse.com/security/cve/CVE-2020-29480.html

https://www.suse.com/security/cve/CVE-2020-29481.html

https://www.suse.com/security/cve/CVE-2020-29483.html

https://www.suse.com/security/cve/CVE-2020-29484.html

https://www.suse.com/security/cve/CVE-2020-29566.html

https://www.suse.com/security/cve/CVE-2020-29570.html

Announcement ID: SUSE-SU-2020:3880-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate severity system patch SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.